fix!: delete_user takes id, not email

.github/workflows/ci.yml

@@ -44,7 +44,7 @@ jobs:
         run: |
           docker run -d --name authorizer \
             -p 8080:8080 -p 9091:9091 \
-            quay.io/authorizer/authorizer:2.4.0-rc.13 \
+            quay.io/authorizer/authorizer:2.4.0-rc.16 \
             --database-type=sqlite --database-url=test.db \
             --jwt-type=HS256 --jwt-secret=test \
             --admin-secret=admin --client-id=ci-client --client-secret=secret \

pyproject.toml

@@ -28,10 +28,15 @@ classifiers = [
 # grpc-gateway responses with protojson (int64-as-string + single-field wrappers)
 # using those message types. grpcio is only needed for the optional ``grpc``
 # protocol (pulled via authorizer-proto[grpc]).
-dependencies = ["httpx>=0.24,<1", "protobuf>=4", "authorizer-proto>=0.2.0rc0"]
+#
+# authorizer-proto is pinned at >=0.2.0rc1: rc1 replaced DeleteUserRequest.email
+# with .id, and this SDK's delete_user builds the id form. An older SDK paired
+# with rc1 (or this SDK with rc0) breaks at that call, so the floor moves with
+# the break rather than floating across it.
+dependencies = ["httpx>=0.24,<1", "protobuf>=4", "authorizer-proto>=0.2.0rc1"]
 
 [project.optional-dependencies]
-grpc = ["authorizer-proto[grpc]>=0.2.0rc0", "grpcio>=1.60", "protobuf>=4"]
+grpc = ["authorizer-proto[grpc]>=0.2.0rc1", "grpcio>=1.60", "protobuf>=4"]
 dev = [
     "pytest>=7",
     "pytest-asyncio>=0.23",

src/authorizer/types.py

@@ -660,7 +660,10 @@ class UpdateUserRequest(_Request):
 
 @dataclass
 class DeleteUserRequest(_Request):
-    email: str
+    # BREAKING (server 2.4.0): this took `email` and now takes `id`. Email is
+    # not an identifier every account has — a phone-only signup has none — so
+    # an email-keyed delete could not reach those accounts at all.
+    id: str
 
 
 @dataclass

tests/integration/test_live.py

@@ -550,7 +550,7 @@ def test_admin_org_member_lifecycle(
         ).message
     finally:
         admin.delete_organization(t.OrganizationRequest(id=org.id))
-        admin.delete_user(t.DeleteUserRequest(email=email))
+        admin.delete_user(t.DeleteUserRequest(id=user_id))
 
 
 def test_admin_org_domain_lifecycle(admin: AuthorizerAdminClient, protocol: str) -> None:
@@ -691,4 +691,4 @@ def test_webauthn_options_and_credentials(
         assert isinstance(creds, list)
         assert creds == []  # nothing registered yet
     finally:
-        admin.delete_user(t.DeleteUserRequest(email=email))
+        admin.delete_user(t.DeleteUserRequest(id=signup.user.id))

tests/test_admin_client.py

@@ -81,7 +81,7 @@ def test_delete_user_destructive_message() -> None:
         return_value=Response(200, json={"data": {"_delete_user": {"message": "deleted"}}})
     )
     with _admin() as c:
-        assert c.delete_user(t.DeleteUserRequest(email="a@b.com")).message == "deleted"
+        assert c.delete_user(t.DeleteUserRequest(id="usr_123")).message == "deleted"
 
 
 @respx.mock